Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Proposal: Configurable Webhook Authorizer #3920

Closed
longquanzheng opened this issue Jan 24, 2021 · 2 comments
Closed

Proposal: Configurable Webhook Authorizer #3920

longquanzheng opened this issue Jan 24, 2021 · 2 comments
Labels

Comments

@longquanzheng
Copy link
Collaborator

Is your feature request related to a problem? Please describe.
As of #2833 , Cadence has a AuthN interface and already plumbed through the system. However, it requires users to implement the interface and then re-compile the binary to use. This is not convenient because users have to be familiar with Cadence code base to make code change, and they will not be able to use the standard docker image from releases. Moreover, they have to keep their code in sync with Cadence.

Proposed Solution
Provide a configurable Webhook Authorizer via REST/HTTPS to external service, to determine if a request has enough permission.
Example as pointed out in the issue: https://kubernetes.io/docs/reference/access-authn-authz/webhook/ and

Additional context
N/A

@longquanzheng
Copy link
Collaborator Author

replaced by #4099

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant